- Enforcing jurisdiction
- Finland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Alektum Oy – €750,000 Fine (Finland, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Alektum Oy was fined for failing to respond to requests from individuals wanting to access their personal data. This case is significant as it underscores the obligation of companies to be transparent and responsive to data requests. The fine was substantial at €750,000.
What happened
Alektum Oy ignored requests from individuals to review their personal data.
Who was affected
Individuals who requested access to their personal data held by Alektum Oy.
What the authority found
The authority determined that Alektum Oy violated GDPR by not responding to data access requests.
Why this matters
This case serves as a reminder for companies to take data access requests seriously and respond in a timely manner, reinforcing the rights of individuals under data protection laws.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 10 March 2026.
Processing notes: articles corrected, date discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Alektum Oy has declined to answer data subjects request to review their data. The company also hampered and slowed down the investigation The case is based on three different reports made to DPA. In two cases data subject didn't receive any replies from the company and in one case data subject got a general reply but not the information requested. In the case of one data subject, Alektum Oy explained the non-response by saying that it no longer processed personal data of the data subject. DPA stated that even then, the company should have responded to the data subject and inform that they no longer process the data subjects personal data. In case 6707/154/2018 data subject requested to use his right to be forgotten as defined in article 17. Alektum Oy denied to remove data from their system. DPA hold that controller had right to decline the request because the data subject still had outstanding account for the controllers client and the information was still needed for the purpose it was originally collected. The controller should have inform the data subject when his data would be removed. DPA hold that Alektum Oy has violated GDPR Article 15 Subsection 1 and 2 as well as Article 12 Subsection 3 in all three cases. DPA imposed fine of 750,000 euros for the controller.
Related Enforcement Actions (0)
No other enforcement actions found for Alektum Oy in FI
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
13 December 2022
Authority
DPA Tietosuojavaltuutetu
Fine Amount
€750,000
About this data
Cite as: Cookie Fines. Alektum Oy - Finland (2022). Retrieved from cookiefines.eu
Last updated: